man.dnssec-checkds.html revision 6bcac4b58d16ee91184a72bd4ff05c41538fd932
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User - Copyright (C) 2004-2014 Internet Systems Consortium, Inc. ("ISC")
f0aad5341752aefe5059832f6cf3abc3283c6e16Tinderbox User - Copyright (C) 2000-2003 Internet Software Consortium.
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - Permission to use, copy, modify, and/or distribute this software for any
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - purpose with or without fee is hereby granted, provided that the above
5347c0fcb04eaea19d9f39795646239f487c6207Tinderbox User - copyright notice and this permission notice appear in all copies.
d6fa26d0adaec6c910115be34fe7a5a5f402c14fMark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User - REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User - AND FITNESS. IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User - INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
fd2597f75693a2279fdf588bd40dfe2407c42028Tinderbox User - LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt - OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User - PERFORMANCE OF THIS SOFTWARE.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<meta name="generator" content="DocBook XSL Stylesheets V1.71.1">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<link rel="start" href="Bv9ARM.html" title="BIND 9 Administrator Reference Manual">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<link rel="up" href="Bv9ARM.ch10.html" title="Manual pages">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<link rel="prev" href="man.delv.html" title="delv">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<link rel="next" href="man.dnssec-coverage.html" title="dnssec-coverage">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<table width="100%" summary="Navigation header">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<tr><th colspan="3" align="center"><span class="application">dnssec-checkds</span></th></tr>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<a accesskey="p" href="man.delv.html">Prev</a>�</td>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<th width="60%" align="center">Manual pages</th>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<td width="20%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<a name="man.dnssec-checkds"></a><div class="titlepage"></div>
1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User<p><span class="application">dnssec-checkds</span> — A DNSSEC delegation consistency checking tool.</p>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<div class="cmdsynopsis"><p><code class="command">dnssec-checkds</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<div class="cmdsynopsis"><p><code class="command">dnssec-dsfromkey</code> [<code class="option">-l <em class="replaceable"><code>domain</code></em></code>] [<code class="option">-f <em class="replaceable"><code>file</code></em></code>] [<code class="option">-d <em class="replaceable"><code>dig path</code></em></code>] [<code class="option">-D <em class="replaceable"><code>dsfromkey path</code></em></code>] {zone}</p></div>
7e71f05d8643aca84914437c900cb716444507e4Tinderbox User<p><span><strong class="command">dnssec-checkds</strong></span>
7e71f05d8643aca84914437c900cb716444507e4Tinderbox User verifies the correctness of Delegation Signer (DS) or DNSSEC
7e71f05d8643aca84914437c900cb716444507e4Tinderbox User Lookaside Validation (DLV) resource records for keys in a specified
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<dt><span class="term">-f <em class="replaceable"><code>file</code></em></span></dt>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User If a <code class="option">file</code> is specified, then the zone is
dec590a3deb8e87380a8bd3a77d535dba3729bf6Tinderbox User read from that file to find the DNSKEY records. If not,
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User then the DNSKEY records for the zone are looked up in the DNS.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<dt><span class="term">-l <em class="replaceable"><code>domain</code></em></span></dt>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User Check for a DLV record in the specified lookaside domain,
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User instead of checking for a DS record in the zone's parent.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User For example, to check for DLV records for "example.com"
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User in ISC's DLV zone, use:
7e71f05d8643aca84914437c900cb716444507e4Tinderbox User <span><strong class="command">dnssec-checkds -l dlv.isc.org example.com</strong></span>
7e71f05d8643aca84914437c900cb716444507e4Tinderbox User<dt><span class="term">-d <em class="replaceable"><code>dig path</code></em></span></dt>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User Specifies a path to a <span><strong class="command">dig</strong></span> binary. Used
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<dt><span class="term">-D <em class="replaceable"><code>dsfromkey path</code></em></span></dt>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User Specifies a path to a <span><strong class="command">dnssec-dsfromkey</strong></span> binary.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User Used for testing.
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<p><span class="citerefentry"><span class="refentrytitle">dnssec-dsfromkey</span>(8)</span>,
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User <span class="citerefentry"><span class="refentrytitle">dnssec-keygen</span>(8)</span>,
14a656f94b1fd0ababd84a772228dfa52276ba15Evan Hunt <span class="citerefentry"><span class="refentrytitle">dnssec-signzone</span>(8)</span>,
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<p><span class="corpauthor">Internet Systems Consortium</span>
ad8f23aed6c75f94f238c1f23f4e17515d28eb55Tinderbox User<table width="100%" summary="Navigation footer">
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<a accesskey="p" href="man.delv.html">Prev</a>�</td>
1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User<td width="20%" align="center"><a accesskey="u" href="Bv9ARM.ch10.html">Up</a></td>
1e9517ea2156b990be21f44676d3370318eacf17Tinderbox User<td width="40%" align="right">�<a accesskey="n" href="man.dnssec-coverage.html">Next</a>
dec590a3deb8e87380a8bd3a77d535dba3729bf6Tinderbox User<td width="40%" align="left" valign="top">delv�</td>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<td width="20%" align="center"><a accesskey="h" href="Bv9ARM.html">Home</a></td>
fae13836a33b474a6aa2c147df8334f5b1ffae45Tinderbox User<td width="40%" align="right" valign="top">�<span class="application">dnssec-coverage</span>